On Sat, Jul 20, 2019 at 12:29:04PM -0000, Stuart Henderson wrote:
> On 2019-07-18, Mik J <[email protected]> wrote:
> > Thank you Otto for your quick answer.
> >
> > Le jeudi 18 juillet 2019 à 08:54:02 UTC+2, Otto Moerbeek
> > <[email protected]> a écrit :
> >
> > On Thu, Jul 18, 2019 at 06:41:12AM +0000, Mik J wrote:
> >
> >> Hello,
> >> I'm using Openbsd 6.5 and have DiG 9.4.2-P2 provided with it.This version
> >> seems to be old (from 2009) but I couldn't find exactly when it dates.
> >> However new DNS records appeared in 2013 such as CAA in RFC 6844When I dig
> >> the CAA record dig returns NXDOMAIN
> >> insteadhttps://dns.google.com/query?name=google.com&type=CAA&dnssec=true
> >> Do you think we could have an updated version of dig in Openbsd base ?
> >> Thank you
> >>
> >> $ dig CAA google.com
> >
> > Yes, known. It is on my list to update it, but I don't know when I
> > will get to it.
>
> BIND switched license to MPL, AFAIK this is no good for base. Personally
> I would be happier to just remove it than update to a still-old version
> as it gets in the way of running something current ..
yes, agreed, the latest version for us would be 9.10.8 released about a
year ago.
IMO we should have at least a basic resolve command in base.
-Otto
>
> > If you really need a newer one, you can install isc-bind from packages, it
> > comes with a newer dig in /usr/local/bin
>
> I do this, and have an alias in .kshrc:
>
> alias dig=/usr/local/bin/dig
>
>